Centralize extraction bundle evidence

internal/artifacts/extraction_catalog_test.go

@@ -4,6 +4,7 @@ import (
 	"errors"
 	"os"
 	"path/filepath"
+	"runtime"
 	"testing"
 	"time"
 
@@ -76,6 +77,60 @@ func TestHydrateExtractionArtifactsAcceptsOnlyCompleteCurrentBundle(t *testing.T
 	}
 }
 
+func TestInspectExtractionEvidenceClassifiesBundleStates(t *testing.T) {
+	tests := []struct {
+		name   string
+		state  ExtractionEvidenceState
+		mutate func(*testing.T, *SessionPaths, *manifest.Manifest)
+	}{
+		{name: "valid", state: ExtractionEvidenceValid, mutate: func(_ *testing.T, _ *SessionPaths, _ *manifest.Manifest) {}},
+		{name: "absent", state: ExtractionEvidenceAbsent, mutate: func(_ *testing.T, _ *SessionPaths, m *manifest.Manifest) {
+			m.Stages["extract"].Status = manifest.StatusFailed
+		}},
+		{name: "obsolete version", state: ExtractionEvidenceObsolete, mutate: func(_ *testing.T, _ *SessionPaths, m *manifest.Manifest) {
+			m.Stages["extract"].Outputs[0].Contract.SchemaVersion = "99"
+		}},
+		{name: "incomplete", state: ExtractionEvidenceObsolete, mutate: func(_ *testing.T, _ *SessionPaths, m *manifest.Manifest) {
+			m.Stages["extract"].Outputs = m.Stages["extract"].Outputs[1:]
+		}},
+		{name: "unsafe root", state: ExtractionEvidenceUnsafe, mutate: func(t *testing.T, paths *SessionPaths, _ *manifest.Manifest) {
+			paths.Root = t.TempDir()
+		}},
+		{name: "unsafe symlink", state: ExtractionEvidenceUnsafe, mutate: func(t *testing.T, _ *SessionPaths, m *manifest.Manifest) {
+			if runtime.GOOS == "windows" {
+				t.Skip("symlink creation requires privileges on Windows")
+			}
+			path := m.Stages["extract"].Outputs[0].LocalPath
+			outside := filepath.Join(t.TempDir(), "outside.json")
+			writeExtractionFixtureFile(t, outside, `{"outside":true}`)
+			if err := os.Remove(path); err != nil {
+				t.Fatal(err)
+			}
+			if err := os.Symlink(outside, path); err != nil {
+				t.Fatal(err)
+			}
+		}},
+	}
+
+	for _, test := range tests {
+		t.Run(test.name, func(t *testing.T) {
+			paths, currentManifest, definitions := validExtractionCatalogFixture(t)
+			test.mutate(t, &paths, currentManifest)
+			proof := InspectExtractionEvidence(paths, currentManifest, definitions)
+			if proof.State != test.state {
+				t.Fatalf("proof = %#v, want %q", proof, test.state)
+			}
+
+			catalog := registeredExtractionCatalog(t, definitions)
+			catalog.HydrateExtractionArtifacts(paths, currentManifest, definitions)
+			entry, _ := catalog.Lookup(ExtractionArtifactSourceID("encounters"))
+			if entry.Available != (test.state == ExtractionEvidenceValid) {
+				t.Fatalf("catalog availability for %s = %v", test.state, entry.Available)
+			}
+		})
+	}
+}
+
 func TestHydrateExtractionArtifactsRejectsUntrustedManifestState(t *testing.T) {
 	tests := []struct {
 		name   string